nodesec-csrf-express
var csrf = require('csurf'); /*some code here*/ var app = express(); /*some code here*/ app.use(csrf()); app.get('/', function(req, res, next){ res.render('index', { _csrfToken = req.csrfToken(); }); });